Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

概要

参考情報

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-8963

endpoint manager cloud services appliance のその他の脆弱性

• CVE-2024-9381高 7.2Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
• CVE-2024-9380高 7.2悪用確認済み（CISA KEV）An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit…
• CVE-2024-9379高 7.2悪用確認済み（CISA KEV）SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2021-44529緊急 9.8悪用確認済み（CISA KEV）A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code wit…